Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/0a34a557-417d-3d10-b613-3902ec5eeafc.roa
File: 0a34a557-417d-3d10-b613-3902ec5eeafc.roa (raw, json)
Hash identifier: fXQMdrkZfUtRBuK5FgbikWshmDM8v+UUkbzX5gZ1mG8=
Subject key identifier: F9:BF:FF:E0:8C:2C:11:5F:24:40:14:E9:2D:62:AB:F7:B7:D0:DA:80
Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial: 010D0C9F4328584908816A9314B71A0B3B90BF48
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/0a34a557-417d-3d10-b613-3902ec5eeafc.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 14340
IP address blocks: 13.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:6a:93:14:b7:1a:0b:3b:90:bf:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=9e2e8ff8-050a-4df7-8802-fd0afe62a792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:72:e8:cb:c1:83:b7:e8:76:17:f7:1c:cc:53:
9d:55:a1:08:3c:76:d2:2b:f7:b7:15:b7:b5:6b:6e:
cc:1e:ff:28:c7:1a:5a:37:b2:be:be:80:c9:23:5e:
d4:7f:8b:e4:d1:55:65:ba:1b:ae:d8:22:a1:56:4c:
21:b4:fe:36:58:c2:d0:97:f1:12:d8:45:7d:a2:8b:
0f:c0:52:77:05:8c:80:9b:55:91:a5:89:07:44:91:
c0:0f:e3:03:dd:8a:ed:9b:d4:06:20:eb:3b:6c:b6:
e7:b7:4d:40:bb:f8:46:fa:e1:be:fb:25:96:e8:ff:
3c:41:f7:47:82:a1:fd:f3:5b:52:84:e3:60:62:e2:
ef:40:82:a0:21:50:05:86:2b:ec:55:71:28:97:f7:
d8:6f:69:81:3c:4b:71:c9:e1:69:7b:a2:46:75:da:
40:d8:49:60:d5:55:47:8b:59:90:e9:9f:e2:0b:af:
b2:d1:d9:84:13:bb:8c:e4:8b:6c:21:e0:6c:6e:ac:
30:34:49:8a:21:fd:b8:3a:86:b3:bb:b4:4a:f8:90:
a1:91:7a:19:25:e2:3d:7e:f4:71:85:0d:2b:75:8c:
b7:51:7f:98:3d:3c:dc:1c:65:25:e4:44:1c:95:82:
a7:e5:bb:68:1b:41:19:e0:02:35:10:4d:62:38:d9:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BF:FF:E0:8C:2C:11:5F:24:40:14:E9:2D:62:AB:F7:B7:D0:DA:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/0a34a557-417d-3d10-b613-3902ec5eeafc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
X509v3 Authority Key Identifier:
keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
sbgp-ipAddrBlock: critical
IPv4:
13.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:66:cc:fc:e4:6c:34:1b:fc:f2:c6:f5:59:c3:db:ec:58:70:
25:46:70:68:3a:55:e6:b3:09:76:24:0f:48:06:86:ad:bd:49:
4e:22:50:92:83:6e:b3:dc:a8:20:93:97:10:c6:6a:d6:db:21:
73:5b:d8:73:3a:9f:b4:36:7f:c8:bc:bf:27:6d:7a:08:15:49:
fd:35:c8:06:32:40:1f:26:25:fe:01:09:57:78:76:87:07:ea:
09:51:66:2b:ba:7a:cc:76:91:56:c4:29:11:97:e8:84:ac:46:
33:35:b1:cb:d1:32:9d:a0:7e:8a:ff:77:18:04:4e:59:8f:0d:
f0:43:5f:69:c4:76:9f:71:08:40:29:9f:12:32:62:77:70:ab:
f8:d3:44:51:3d:6f:01:c6:ed:17:37:d8:ff:8a:14:a9:36:c3:
b1:56:90:e4:39:6a:ae:ec:60:a0:fc:87:6a:26:69:5a:83:3d:
c3:09:64:2b:46:94:37:88:6e:dc:4e:64:a6:5f:4e:80:f2:cd:
dd:20:ec:de:1b:8a:c1:39:18:f6:af:ea:32:f7:b1:a8:67:fd:
9c:87:d1:ee:f1:f9:0c:32:60:f8:2e:ff:41:ce:b5:c2:98:40:
a9:51:80:13:00:1e:1d:d8:47:0d:91:c7:4e:42:bc:6e:61:db:
0b:07:e5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:07 2025 by rpki-client